Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09531f14-9bd6-3cfa-be64-e199904a5fee.roa
File:                     09531f14-9bd6-3cfa-be64-e199904a5fee.roa (raw, json)
Hash identifier:          Va6bsrZJyJeaO7KF3ZN5Mae91Iza1W+zv2zqtyRFfOw=
Subject key identifier:   80:98:05:BB:7F:22:86:DC:CB:CB:05:FB:D2:CF:23:E5:12:B0:DD:C9
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584EA3DAB3478B8F7BF9ACF6AB80
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09531f14-9bd6-3cfa-be64-e199904a5fee.roa
Signing time:             Mon 27 Jul 2026 17:25:56 +0000
ROA not before:           Mon 27 Jul 2026 17:25:56 +0000
ROA not after:            Sun 25 Oct 2026 17:25:56 +0000
asID:                     395383
IP address blocks:        199.127.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a3:da:b3:47:8b:8f:7b:f9:ac:f6:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Jul 27 17:25:56 2026 GMT
            Not After : Oct 25 17:25:56 2026 GMT
        Subject: CN=2871f07e-8c28-4ebc-9fdf-6eca5eb154ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:2a:e7:4f:99:f1:6f:49:3b:25:6d:5b:59:
                    de:34:6e:65:85:19:8c:87:16:55:53:41:9d:47:38:
                    4e:c9:88:e1:83:a1:84:3b:ae:8d:f0:e3:05:91:6f:
                    00:0e:c3:74:7b:2c:26:d0:99:ba:e0:07:50:14:83:
                    36:93:2f:cb:39:bb:1d:5e:4c:3c:df:7a:a1:ab:df:
                    bb:4a:4e:8a:3e:e4:38:fd:d9:c3:5a:73:a5:98:36:
                    e9:9f:cc:93:d3:e5:9c:6e:6b:35:0f:5b:e8:f5:ff:
                    08:ce:c9:37:2c:57:13:7c:37:1c:7c:f7:f2:1a:ab:
                    b0:f2:c1:d3:ce:7d:fd:cb:e6:9a:e9:8b:d4:fd:1d:
                    f0:ef:ca:6d:6f:16:ae:6f:7d:f2:e3:e8:ef:13:3d:
                    2e:e9:c1:50:4b:c2:67:5d:74:db:29:6e:be:1a:a0:
                    be:c5:92:a9:e4:0b:31:93:01:7a:fd:3d:b7:28:38:
                    53:93:68:38:89:f6:6e:23:2f:77:16:a0:9f:14:a8:
                    bd:45:09:d6:ef:f0:b8:3d:84:8c:40:7e:1d:1d:57:
                    be:5f:2b:8b:7f:f8:a1:0e:32:69:da:ea:7f:be:9b:
                    e6:6e:2c:66:25:5c:0d:59:fd:3a:57:5c:d5:72:05:
                    a6:75:fe:ff:38:b9:b5:4f:8d:42:9d:35:38:c1:20:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:98:05:BB:7F:22:86:DC:CB:CB:05:FB:D2:CF:23:E5:12:B0:DD:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09531f14-9bd6-3cfa-be64-e199904a5fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:80:51:69:0b:e4:18:aa:52:8a:15:a4:2c:c0:b9:ae:0e:19:
         fe:13:2d:f4:54:82:7c:04:12:b3:0b:1c:79:b0:02:60:c6:a2:
         cc:53:f4:12:db:59:c7:3b:37:06:7a:65:bb:81:b5:9b:17:f3:
         d6:b7:14:82:05:ab:6b:8b:6e:0c:00:45:f0:7a:77:ae:41:9d:
         b0:39:a3:eb:43:ed:f1:6a:b3:92:18:46:d8:d1:c3:34:36:62:
         b6:c0:97:48:f3:58:e4:26:89:57:05:4f:37:18:37:28:53:97:
         8f:dd:ac:b1:97:7b:a5:05:d4:be:f8:39:d7:da:11:1c:b0:c1:
         5c:0c:a7:50:3a:d0:a4:e7:6c:0d:b7:94:b6:cf:e5:a9:e4:67:
         54:90:04:f7:4d:0b:35:86:2f:b0:63:ac:1f:a7:5a:26:09:fe:
         e6:ee:98:ba:87:06:ac:b8:d5:59:c7:6a:ea:44:25:c9:b0:d0:
         f1:65:1d:42:62:3e:bd:f8:95:19:b1:8b:17:f4:60:d6:d8:29:
         4f:56:98:f3:9c:1d:87:9b:3c:1a:05:ff:57:85:98:5d:66:3a:
         16:4e:7a:2f:5e:cd:09:57:05:6d:16:31:1f:fd:95:94:9c:c7:
         b1:74:37:99:cf:75:1d:69:5e:95:4d:34:96:80:e4:ff:4f:a7:
         6f:a6:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:09 2026 by rpki-client